Run Claude review automatically on every PR

[jlocke2]

Adds .github/workflows/claude-review.yml so Claude reviews every PR automatically.

• Auto-review triggers when a PR is opened or marked ready for review; draft PRs are excluded
• Mention @claude in a PR comment to trigger a re-review
• Uses the org-level ANTHROPIC_API_KEY secret (already visible to this repo)
• Review prompt is adapted for an API client gem: bugs, breaking public-API changes, HTTP-in-loops, CLAUDE.md conventions, test coverage (tenant-isolation/Sidekiq checks dropped since they do not apply)
• Each run is capped at 12 turns / $0.75

Part of the agentic-readiness work across Pipeline CRM Ruby repos.

🤖 Generated with Claude Code

Update: review runs pinned to Sonnet — cheaper per run, and the reviewing model differs from the model that authors most changes.

[sevgibson]

LGTM — uses the safe pull_request trigger (not pull_request_target, so fork PRs get no secrets), contents: read, and budget/turn caps.